Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier: y3bHIk4Ecny9t7iR3I73LelANsQg5ubosLYDvdhr+Zc=
Subject key identifier: DD:F8:65:5C:7F:E0:DE:3B:21:65:FF:BA:9A:31:84:F3:57:71:A2:6F
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial: 019782E982C4F1B6AC21A1AF77FEAEC0A4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number: 1597
Signing time: Wed 18 Jun 2025 12:00:30 +0000
Manifest this update: Wed 18 Jun 2025 12:00:30 +0000
Manifest next update: Thu 19 Jun 2025 12:00:30 +0000
Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: l0mz12MwcRwAvVeWYcQOODON9eci0h5qz0kmrfPIYGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:e9:82:c4:f1:b6:ac:21:a1:af:77:fe:ae:c0:a4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Validity
Not Before: Jun 18 12:00:30 2025 GMT
Not After : Jun 19 12:00:30 2025 GMT
Subject: CN=ddf8655c7fe0de3b2165ffba9a3184f35771a26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:b7:fd:71:40:ca:a1:e5:0e:70:d1:9f:5b:
3f:09:77:0f:cb:49:e8:e7:d4:b7:b9:8b:27:ae:38:
3b:7f:a9:20:7e:68:99:3d:c5:70:84:9b:50:62:b4:
45:44:4d:1c:aa:30:62:a1:e1:38:e8:35:64:a1:80:
87:ab:ef:7f:d7:51:a6:40:09:e4:75:eb:33:17:aa:
c4:f1:43:cf:b3:34:eb:1e:9c:32:9c:34:f8:00:cc:
cb:0a:b6:5e:d3:b5:f7:02:43:ba:c1:d6:a2:98:2f:
42:e6:4c:14:7e:84:79:7c:cf:a1:aa:6a:0e:8f:a2:
9d:a8:59:88:2f:fd:5b:b6:9f:c4:22:ae:24:3b:78:
b6:2e:46:27:bb:68:94:f2:dc:46:14:df:ce:b3:e4:
0b:1f:16:17:9d:54:ae:37:d5:97:cd:56:dc:c8:20:
67:9c:e5:fe:c6:16:fc:7a:bc:0c:1d:10:7f:5f:75:
ac:0a:80:fc:72:f1:eb:6e:a9:74:5c:32:76:65:99:
bb:04:ee:b9:ec:70:24:c5:1b:fa:67:35:fd:5b:99:
e9:23:cb:4a:b9:e2:37:e9:34:59:91:ae:bc:cc:5f:
7c:91:f8:8f:7f:01:e7:06:54:c2:f9:93:7d:40:73:
20:26:d7:81:81:6d:b7:87:b5:5d:f3:15:1a:21:22:
ee:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F8:65:5C:7F:E0:DE:3B:21:65:FF:BA:9A:31:84:F3:57:71:A2:6F
X509v3 Authority Key Identifier:
keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f0:06:d4:13:57:64:d6:e6:dc:fa:bd:49:7c:c9:77:27:53:
9d:07:5c:1e:1a:f3:a3:10:ce:5a:3f:b5:67:36:13:02:70:58:
2a:ea:ce:23:0f:54:54:1a:09:80:ea:17:b3:9c:00:de:68:12:
f0:7d:a2:17:c1:31:42:6b:9b:3e:2c:8c:b1:80:bd:b7:9c:7a:
28:b8:98:20:41:b3:5e:59:7e:cd:94:f1:b3:fe:d6:74:1c:92:
3e:c7:94:e6:63:61:5a:2b:d8:73:4d:5c:96:82:f2:51:db:28:
7d:65:67:fc:1d:2f:81:fc:93:b5:55:cb:1e:eb:b6:18:cb:bc:
26:a7:8f:d8:5f:5a:19:8c:71:73:bc:f2:d3:83:7a:1b:9b:7e:
65:e6:8b:02:cc:cd:d8:55:7f:75:05:0f:af:61:8c:58:10:2a:
ee:1f:63:92:ea:21:1f:7f:0f:6a:4c:14:64:92:b1:02:2a:aa:
c1:1e:99:b7:c5:ed:68:d6:f1:16:3c:24:3b:cc:99:49:ec:71:
a5:92:17:ec:be:bb:57:b8:43:a2:02:50:23:65:03:42:bb:8d:
19:f9:5f:18:74:24:50:76:93:bc:86:dd:53:07:fd:c7:eb:08:
64:1a:0d:33:8b:b0:c4:27:33:27:d5:00:01:d9:c1:24:ee:ee:
6c:19:63:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:12:06 2025 by rpki-client